linux/meta-openembedded.git/meta-networking, branch scarthgap-next

libcoap: patch CVE-2024-31031

2025-08-02T17:37:04+00:00

Pick commit [1] from [2] which fixes [3] as listed in [4]. [1] https://github.com/obgm/libcoap/commit/214665ac4b44b1b6a7e38d4d6907ee835a174928 [2] https://github.com/obgm/libcoap/pull/1352 [3] https://github.com/obgm/libcoap/issues/1351 [4] https://nvd.nist.gov/vuln/detail/CVE-2024-31031 Signed-off-by: Peter Marko Signed-off-by: Armin Kuster

open-vm-tools: fix CVE-2025-22247

2025-08-02T17:37:04+00:00

VMware Tools contains an insecure file handling vulnerability. \xa0A malicious actor with non-administrative privileges on a guest VM may tamper the local files to trigger insecure file operations within that VM. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-22247 Upstream patch: Backport from https://github.com/vmware/open-vm-tools/blob/CVE-2025-22247.patch/CVE-2025-22247-1230-1250-VGAuth-updates.patch Signed-off-by: Hitendra Prajapati Signed-off-by: Armin Kuster

mbedtls: upgrade 3.6.3.1 -> 3.6.4

2025-08-02T17:37:04+00:00

Fixes several security vulnerabilities: CVE-2025-49601, CVE-2025-49600, CVE-2025-52496, CVE-2025-47917, CVE-2025-48965, CVE-2025-52497, and CVE-2025-49087 The framework directory has been changed into a git submodule.[1][2] The recipe now uses Git Submodule Fetcher (gitsm) Changelog: https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.4 [1] https://github.com/Mbed-TLS/mbedtls/commit/8cf5666a174237998a7965e284d7ba8c1655d16d [2] https://github.com/Mbed-TLS/mbedtls/commit/c90c6d8ff787ab8787d9373b0e662a95ed1f4dae Signed-off-by: Guðni Már Gilbert Signed-off-by: Khem Raj Signed-off-by: Armin Kuster

mbedtls: upgrade 3.6.3 -> 3.6.3.1

2025-08-02T17:34:07+00:00

Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj Signed-off-by: Armin Kuster

postfix: fix rootfs file difference

2025-08-02T17:13:14+00:00

Rootfs file differs with the same project configure, add preliminary setting to avoid this. Signed-off-by: Jinfeng Wang Signed-off-by: Armin Kuster

proftpd: Fix CVE-2023-51713

2025-08-02T17:13:06+00:00

Upstream-Status: Backport from https://github.com/proftpd/proftpd/commit/97bbe68363ccf2de0c07f67170ec64a8b4d62592 Link: https://git.openembedded.org/meta-openembedded/commit/?h=kirkstone&id=730e44900a0a86265bad93a16b5a5ff344a07266 Signed-off-by: Vijay Anusuri Signed-off-by: Armin Kuster

tcpreplay: fix CVE-2024-22654

2025-07-11T00:13:26+00:00

tcpreplay v4.4.4 was discovered to contain an infinite loop via the tcprewrite function at get.c. Signed-off-by: Archana Polampalli Signed-off-by: Armin Kuster

wireshark: upgrade 4.2.9 -> 4.2.12

2025-07-11T00:05:56+00:00

releasenote: https://www.wireshark.org/docs/relnotes/wireshark-4.2.12.html https://www.wireshark.org/docs/relnotes/wireshark-4.2.11.html https://www.wireshark.org/docs/relnotes/wireshark-4.2.10.html Includes security fix CVE-2025-5601 License-Update: Update GPL copies for FSF no longer having an address Link: https://github.com/wireshark/wireshark/commit/18e4db97c424c11cb26fa7fef97b95dd3d001bb1 The 4.2.9 was not longer available at the original SRC_URI. At the new SRC_URI all version of the wireshark releases are available. Signed-off-by: Vijay Anusuri Signed-off-by: Armin Kuster

chrony: use inherit_defer for conditional inherit of useradd

2025-06-23T20:57:53+00:00

[ Upstream commit 63df976d8eec0fa714e8da30f4333f8af23c57d3 ] conditionnal inherit is missed when PACKAGECONFIG privdrop is activated after this inherit, eg in .bbappend. Signed-off-by: Andreas Fenkart Signed-off-by: Khem Raj Signed-off-by: Clayton Casciato Signed-off-by: Armin Kuster

proftpd: Fix CVE-2024-57392

2025-05-21T13:17:27+00:00

Upstream-Status: Backport from https://github.com/proftpd/proftpd/commit/981a37916fdb7b73435c6d5cdb01428b2269427d Signed-off-by: Vijay Anusuri Signed-off-by: Armin Kuster